Route Origin Authorization
$ rpki-client -vvf rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B331F9475CD11EB966F546EC4F9AE02.roa
File: 6B331F9475CD11EB966F546EC4F9AE02.roa (raw, json)
Hash identifier: +UT61V4Z7QI4SFN+Y6THOkJBcJJSDgtdN8/ZAUlxd9c=
Subject key identifier: A2:E6:E1:0A:C1:E4:BA:A8:12:64:64:80:05:EC:59:2F:C5:B8:59:E9
Certificate issuer: /CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Certificate serial: 6CF4
Authority key identifier: 29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
Subject info access: rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B331F9475CD11EB966F546EC4F9AE02.roa
Signing time: Wed 10 May 2023 16:26:59 +0000
ROA not before: Wed 10 May 2023 16:26:59 +0000
ROA not after: Mon 01 Jul 2024 00:00:00 +0000
asID: 137147
IP address blocks: 103.108.96.0/23 maxlen: 23
Validation: Failed, RFC 3779 resource not subset of parent's resources
Certificate:
Data:
Version: 3 (0x2)
Serial Number: 27892 (0x6cf4)
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=A918EDB2/serialNumber=296EDB64F3AF6E9D980932E816F95983E3ABC823
Validity
Not Before: May 10 16:26:59 2023 GMT
Not After : Jul 1 00:00:00 2024 GMT
Subject: CN=645bc5d3-f5f9
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:b6:0d:6c:f6:2f:c9:28:65:e8:80:c6:1b:d4:e8:
1d:7b:42:6f:7a:ba:2c:f5:7f:6d:78:2d:6c:73:13:
e9:bf:9b:7a:df:33:ec:5b:4b:d3:19:7f:c5:b3:97:
bd:9b:25:86:aa:d7:ed:3f:ae:a9:8d:0c:06:29:8e:
93:8a:53:01:cb:ec:e5:e4:86:a2:ae:21:c5:ac:c6:
52:c5:eb:e5:5f:0d:83:34:37:58:b1:af:0a:cc:cf:
4a:8b:fe:18:97:9b:40:1a:6a:86:c4:d4:bd:fa:bf:
a8:90:7a:82:f5:9e:da:0b:92:01:a4:60:87:57:a8:
fe:60:a8:49:b8:03:54:76:df:20:35:77:f2:41:4a:
5f:26:77:e1:9e:9b:20:6e:bc:d6:de:99:14:69:76:
63:50:0c:d3:8d:aa:5e:a1:5e:36:00:63:a2:be:47:
ed:a0:a5:be:1b:a8:6f:19:bb:5b:2b:ca:d2:be:d7:
a7:55:22:14:5a:4a:94:7e:33:59:6e:6d:09:76:61:
b9:e0:70:fb:fe:c2:f2:3e:4f:83:fd:dc:a3:b7:a4:
e4:53:d1:22:76:cc:43:90:c1:e6:26:a9:1f:ed:71:
b0:1b:87:89:cb:c3:41:bc:b6:36:0e:fc:f2:ee:56:
31:53:41:cf:fb:14:c6:a0:e0:78:2c:e1:ed:06:fb:
ca:e7
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
A2:E6:E1:0A:C1:E4:BA:A8:12:64:64:80:05:EC:59:2F:C5:B8:59:E9
X509v3 Authority Key Identifier:
keyid:29:6E:DB:64:F3:AF:6E:9D:98:09:32:E8:16:F9:59:83:E3:AB:C8:23
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/KW7bZPOvbp2YCTLoFvlZg-OryCM.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/KW7bZPOvbp2YCTLoFvlZg-OryCM.cer
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
CPS: https://www.apnic.net/RPKI/CPS.pdf
Subject Information Access:
Signed Object - URI:rsync://rpki.apnic.net/member_repository/A918EDB2/2A43E30C70E911E2B36D4B6B2979BB20/6B331F9475CD11EB966F546EC4F9AE02.roa
RPKI Notify - URI:https://rrdp.apnic.net/notification.xml
sbgp-ipAddrBlock: critical
IPv4:
103.108.96.0/23
Signature Algorithm: sha256WithRSAEncryption
16:ec:55:3a:96:f1:d5:f5:35:9e:18:89:eb:11:9f:75:76:6a:
49:e0:21:ad:84:9e:08:2c:9a:ff:65:06:e7:1f:9b:9c:f4:55:
70:0e:49:eb:36:9f:e6:1a:ec:f8:8e:18:07:97:6b:af:ac:87:
1a:fb:d7:3b:98:6f:b3:b0:e9:78:4f:1b:d5:71:00:92:4c:e9:
ff:62:49:64:32:9e:c5:f1:14:72:1e:28:58:a9:c9:aa:9f:72:
7f:1a:d9:4c:ba:98:cd:64:25:b6:3a:ef:a3:17:0c:1f:22:3a:
fe:5c:d2:16:51:ee:23:55:57:2b:34:cf:3e:f3:80:91:03:4b:
d4:0c:42:1f:de:3a:fe:d3:c3:3a:c5:95:f8:63:0e:2a:ef:ed:
f0:4e:4a:7c:7c:63:30:a7:1b:a7:da:b5:15:e9:9f:26:b7:9a:
50:22:b3:57:be:d3:41:ae:c8:03:e7:5c:19:cf:e5:61:25:01:
ef:87:c5:75:59:50:a3:64:14:3d:f9:bb:98:77:b4:ec:e4:0b:
9b:fc:ba:8b:f7:41:57:fc:37:65:06:46:cb:6b:f2:09:12:64:
34:09:4d:db:8f:f4:c9:f7:31:0a:b7:19:f9:7f:5c:46:f4:b6:
03:ff:81:ba:45:86:56:ad:81:d0:e9:32:18:17:c2:d4:de:b6:
60:08:76:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 23 22:31:44 2023 by rpki-client on console-ams.rpki-client.org